Pluto Security raises $42M as AI coding spreads

Pluto Security's pitch rests on a specific observation from its own customer base: AI tools can appear inside a company's environment within two hours of release, and most of the risks the company detects come from apps built by non-developers. Bahat says finance departments generate the most such risks, followed by marketing and legal teams, with developers ranking fourth — a reversal of where security attention has traditionally focused. One example her company cites is a vibe-coded app built by a finance employee at a Fortune 500 company to manage customer information and churn, which was left exposed to the internet.

The startup's approach differs from applying existing security software to AI, which it argues is a square-peg-round-hole fit. Instead, Pluto monitors AI tools, their skills, extensions, and MCP servers, along with the apps and agents employees create, and connects to endpoint security and device management systems to gather prompts, commands, processes, and permissions. Bahat frames the shift as moving "from user behavior to agent behavior." Its free Plutonium platform, launched in April, offers risk checks on public AI skills, connectors, and add-ons, plus an MCP scanner and a catalog of verified components; Bahat says thousands of security professionals use it and that 70% of the sales pipeline now comes from inbound interest.

Investor appetite for this category is visible in the round's structure: an $8.5 million seed led by TLV Partners, with Armis' founders investing, followed by a $34 million Series A led by Jump Capital with Skinos, Ansa Capital, and other angels. Bahat says she has not yet found a proof-of-concept where nothing malicious turned up, and that some environments had active live attacks during testing. The company has 40 employees in the U.S. and Israel and plans to put the new capital into product development, security research, and U.S. expansion.